CVE-2021-31166

---

Description

• POC for CVE-2021-31166: Windows HTTP协议栈远程代码执行漏洞
• create by antx at 2021-09-27.

---

Detail

• Poc-Gif

---

CVE Severity

• attackComplexity: LOW
• attackVector: NETWORK
• availabilityImpact: HIGH
• confidentialityImpact: HIGH
• integrityImpact: HIGH
• privilegesRequired: NONE
• scope: CHANGED
• userInteraction: NONE
• version: 3.1
• baseScore: 9.8
• baseSeverity: CRITICAL

---

Affect

• Windows Server, version 2004 (or 20H1) (Server Core installation),
• Windows 10 Version 2004 (or 20H1) for ARM64/x64/32-bit Systems,
• Windows Server, version 20H2 (Server Core Installation),
• Windows 10 Version 20H2 for ARM64/x64/32-bit Systems.
• Windows Remote Management (WinRM)
• Web Services on Devices (WSDAPI)
• Lack of KB4598481 KB5003173 KB5000736 windows system patch or the system iso is before 2021-05.

---

POC

• Python-Poc
• Golang-Poc

---

Reference

• Ref-Source
  • 0vercl0k/CVE-2021-31166
• Ref-Article
  • CVE-2021-31166 Windows HTTP协议栈远程代码执行漏洞复现
• Ref-Risk
  • HTTP Protocol Stack Remote Code Execution Vulnerability
  • NVD<CVE-2021-31166>
• CVE
  • CVE-2021-31166